Ransomware Strikes Lee Hoffoss Injury Lawyers Firm
Ransomware Attack on Lee Hoffoss Injury Lawyers by Meow Group
Lee Hoffoss Injury Lawyers, a personal injury law firm based in Lake Charles, Louisiana, has recently fallen victim to a ransomware attack orchestrated by the Meow ransomware group. The firm, known for its specialization in personal injury cases, including maritime accidents and industrial injuries, has reportedly had 14 GB of sensitive data exfiltrated by the attackers.
Victim Profile: Lee Hoffoss Injury Lawyers
Lee Hoffoss Injury Lawyers is a small firm with 6 to 10 employees, providing personalized legal services to clients. Founded in 2010 by Attorney Lee Hoffoss, the firm has built a reputation for its expertise in handling complex personal injury cases. The firm stands out in the industry due to its use of advanced technologies in legal practice and courtroom presentations, as well as its commitment to client-centered service. Despite its strengths, the firm's size and the sensitive nature of its data make it a potential target for cybercriminals.
Details of the Attack
The breach was discovered on October 2, and the compromised data includes employee information, client details, scanned payment documents, personal data such as Social Security Numbers, and client medical records. The attackers are advertising the stolen data for sale at $20,000, emphasizing its potential value to legal professionals and market analysts. The firm's reliance on digital records and sensitive client information may have contributed to its vulnerability.
Meow Ransomware Group
Meow Ransomware, associated with the Conti v2 variant, emerged in late 2022 and has been active in targeting organizations with sensitive data, primarily in the United States. The group employs various infection methods, including phishing emails and exploiting RDP vulnerabilities. Meow Ransomware distinguishes itself by using a combination of the ChaCha20 and RSA-4096 algorithms for encryption and maintains a data leak site to pressure victims into paying ransoms. The group's focus on industries with sensitive data, such as legal services, aligns with their attack on Lee Hoffoss Injury Lawyers.
Potential Penetration Methods
The Meow group could have penetrated the firm's systems through phishing emails or exploiting vulnerabilities in remote access protocols. Given the firm's reliance on digital communication and data storage, these methods are plausible entry points for the ransomware attack.
Sources
See Halcyon in action
Interested in getting a demo?
Fill out the form to meet with a Halcyon Anti-Ransomware Expert!